Lead and expand the second line operational risk program, building on the existing framework and policies with a multi-year roadmap
Locations (2)
San Francisco, California, United States
Lehi, Utah, United States
Compensation
The target base salary range for this position is 150,000-230,000. The base salary of the role will be determined by job-related knowledge, experience, education, skills, and location. Base salary is just one part of Happen Bank's Total Rewards package. You may also be eligible for long-term awards (equity) and an annual bonus (which is based on company performance, employee performance and eligible earnings).
Responsibilities
Lead and expand the second line operational risk program
Mature the operational risk taxonomy, risk appetite statements, limits and thresholds and key risk indicators (KRIs) and report the risk profile, top risks, and breaches to the Compliance and Operational Risk Committee and Board
Develop process and execution risk frameworks, including strengthened minimum standards for process documentation, control design, and control testing, and lead independent thematic reviews that surface systemic weaknesses
Expand second line data risk oversight across data governance, quality, lineage, records management, and end-user computing, and challenge first line data practices against policy and expectations
Build out and operationalize a second line payments risk oversight function across all payment channels
Lead and manage digital and technology risk engagements for financial services clients, overseeing end-to-end delivery, team coaching, and client relationship development.
Responsibilities
Lead end-to-end delivery of multiple engagements
Motivate and coach teams
Provide guidance on IT risk management and transformation
Brief engagement teams on client IT environments
Review complex systems and governance frameworks
Requirements
Bachelor's or Master's degree in economics, computer science, computer engineering or cybersecurity
GRC Specialist to execute day‑to‑day compliance and risk program tasks, including responding to customer security questionnaires, supporting audits, and assessing vendor risk.
Responsibilities
Own end‑to‑end responses to inbound customer RFPs, RFIs, and CAIQs
Conduct risk assessments and control validation testing against frameworks such as SOC 2, ISO 27001, and NIST
Support the full lifecycle of SOC 2 and ISO 27001 audits
Conduct vendor security assessments and review vendor questionnaire responses
Keep customer‑facing certifications, policies, and security documentation current
Requirements
Nice to have: ISO 27001 Lead Implementer/Auditor certification
Nice to have: experience responding to customer security questionnaires in a SaaS environment
Nice to have: familiarity with IT/cloud infrastructure
Supports the company's GRC functions, executing day‑to‑day activities, reporting, and program management across privacy, compliance, risk, and third‑party domains.
Locations (2)
Birmingham, Alabama, United States
Atlanta, Georgia, United States
Responsibilities
Monitor vulnerability scanning results
Track and prioritize vulnerabilities for remediation
Own vulnerability management reporting and metrics
Drive remediation SLAs
Develop and maintain security policies
Requirements
Bachelor's degree in computer science, software engineering, or a related field
Manager Digital Risk - Financial ServicesEY · Diegem, Belgium
Senior Compliance and Risk AnalystOptimizely · Berlin, Germany
GRC Analyst (Governance)Deploy · Birmingham, US+1 more